[freeipa PR#5939][opened] ipaserver: disable resolved' stub resolver
by fcami
URL: https://github.com/freeipa/freeipa/pull/5939
Author: fcami
Title: #5939: ipaserver: disable resolved' stub resolver
Action: opened
PR body:
"""
Disable systemd-resolved stub resolver at install time.
Use systemd-resolved' maintained list of upstream DNS servers instead.
Rationale: systemd-resolved always resolves the FQDN to the local IP
and vice-versa. This breaks DNS zone detection and especially reverse
zone detection. This results in --auto-reverse being broken.
On systemd-resolved enabled systems, there are four ways to
configure resolv.conf:
* a symlink to /run/systemd/resolve/stub-resolv.conf
This is the default and uses both the 127.0.0.53 DNS stub plus
the search domains.
* a symlink to /usr/lib/systemd/resolv.conf
This only contains the 127.0.0.53 DNS stub.
* a symlink to /run/systemd/resolve/resolv.conf
This contains the upstream DNS IPs and bypasses systemd-resolved.
* Create and maintain /etc/resolv.conf directly.
Solutions #1 and #2 break DNS zone detection.
Solution #4 is not straightforward.
Combine Solution3 and 4: copy the file containing the upstream DNS IPs
so that it is properly maintained by NetworkManager after installation.
Fixes: https://pagure.io/freeipa/issue/8700
Signed-off-by: François Cami <fcami(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5939/head:pr5939
git checkout pr5939
1 year, 10 months
[freeipa PR#6049][opened] Make the schema cache TTL user-configurable
by rcritten
URL: https://github.com/freeipa/freeipa/pull/6049
Author: rcritten
Title: #6049: Make the schema cache TTL user-configurable
Action: opened
PR body:
"""
The API schema is not checked for changes until after a TTL
is expired. A one-hour TTL was hardcoded which makes development
tedious because the only way to force a schema update is to
remember to remove files between invocations.
This adds a new environment variable, schema_ttl, to configure
the TTL returned by the server to schema() calls. This can be
set low to ensure a frequent refresh during development.
If the client is in compat mode, that is if client is working
against a server that doesn't support the schema() command,
then use the client's schema_ttl instead so that the user still
has control.
https://pagure.io/freeipa/issue/8492
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/6049/head:pr6049
git checkout pr6049
1 year, 11 months